Learning - sending transient nameId

Norman Bodnar bodnarn at gmail.com
Fri Aug 17 11:36:40 EDT 2018

Thanks for the clarification Scott.

I was trying to learn in a sandbox what we'll need to have in place soon
for an SP (not ours) that does make use of the transient id value.

In my sandbox, when I didn't specify this attribute, I didn't see anything
being passed for nameid (transient or otherwise). Is this something that
must be requested from the SP side then? (Searching SP docs now...)


On Thu, Aug 16, 2018 at 4:52 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> Hmm, actually I'm wrong, I thought we were ignoring the old TransientId
> definition, but given that this has come up a couple of times now, I
> checked, and we're not. So that's a bit of a mess, unfortunately, I guess
> defining an AttributeDefinition of that sort still does what it used to,
> which can create some very weird configuration choices if people start
> randomly doing things, some of which you did.
> The simplest way to "fix" it is just to get rid of that definition and
> anything referencing that attribute ID, and once that's gone, transients
> will work the way they're meant to, as a fallback that's all but automatic.
> -- Scott
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180817/25938c93/attachment.html>

More information about the users mailing list